Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S7_KYqNsgADGcd-aarjM8DcoLag.roa
File: S7_KYqNsgADGcd-aarjM8DcoLag.roa (raw, json)
Hash identifier: e2nfnX33c4K5WRKk2KjAz2XrBtmHaCtlxBL4VEUweLY=
Subject key identifier: 4B:BF:CA:62:A3:6C:80:00:C6:71:DF:9A:6A:B8:CC:F0:37:28:2D:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873B75478B96052F73A3FF3287AF75BE96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S7_KYqNsgADGcd-aarjM8DcoLag.roa
Signing time: Sat 01 Apr 2023 06:15:54 +0000
ROA not before: Sat 01 Apr 2023 06:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:75:47:8b:96:05:2f:73:a3:ff:32:87:af:75:be:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 06:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbfca62a36c8000c671df9a6ab8ccf037282da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:54:88:6d:a2:18:68:7d:a4:7f:53:e8:d8:
08:66:a9:0e:a4:e1:e3:85:88:3a:74:52:4e:49:a4:
d3:34:8a:62:66:bb:bf:ff:2d:6f:41:4b:c5:71:ee:
46:8f:52:25:47:ce:e4:d8:3e:14:d5:87:e9:7d:fd:
d4:be:c4:a3:c3:4d:50:03:b2:83:41:30:ef:7e:57:
47:a8:86:8c:7a:3b:a5:91:e8:23:a8:c0:f3:c7:9b:
b6:30:37:ca:be:f6:39:9b:ac:b0:bd:8e:3b:c9:c2:
ae:81:ca:eb:2b:f1:5c:2c:1c:d5:c9:dc:32:80:c6:
20:28:48:ea:d4:ab:ef:7d:0a:e9:99:3f:7e:b0:31:
2a:35:48:13:02:e5:6b:23:52:03:64:22:14:b7:34:
c5:fc:f7:d3:5d:89:49:45:98:d4:50:6e:bf:0c:a7:
c9:69:d5:b8:26:a7:52:7e:8b:1e:b5:5a:09:aa:a1:
bb:85:d7:5b:b6:14:6c:81:6e:60:54:d3:98:d8:61:
11:0a:4f:83:69:2a:8e:e9:10:8f:31:d1:65:04:a5:
4a:a3:9e:af:93:df:d6:4e:32:30:d1:1c:7d:d7:69:
7c:b7:78:23:f6:f2:98:bd:b7:e2:63:a4:1c:9b:ea:
9b:0d:fa:94:50:26:4b:b7:23:7d:4f:70:51:00:99:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:CA:62:A3:6C:80:00:C6:71:DF:9A:6A:B8:CC:F0:37:28:2D:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S7_KYqNsgADGcd-aarjM8DcoLag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2a:36:05:02:aa:fc:e5:d3:c4:5d:69:c5:a6:43:c1:48:df:
5b:89:49:2d:7b:8d:73:bd:2a:48:63:c5:52:75:85:48:15:c2:
ea:54:b2:b7:b0:4e:64:18:6b:6b:ae:c1:a2:59:95:74:6f:c4:
6c:75:8f:98:d9:d0:95:a0:21:8f:57:47:16:8d:ac:e6:9d:af:
b6:0a:41:bc:88:17:27:68:fa:07:c2:4e:f8:47:9f:94:f9:1f:
82:3d:91:b7:5a:85:8b:87:a9:e6:07:6d:64:00:30:d5:72:08:
5d:59:a3:37:7a:9d:89:ec:1c:93:5f:b9:56:c3:08:e1:ed:59:
4d:48:ad:f7:a0:f7:c1:69:a6:6d:77:6c:62:8a:7e:09:96:d0:
54:c0:0c:55:14:68:22:6d:69:52:70:d3:a3:c7:6d:68:55:e4:
c6:2b:00:4f:84:21:2b:5a:bf:79:31:b6:38:d1:11:70:03:e8:
7c:4f:bf:44:42:d2:c2:b5:f8:e3:b3:3d:f6:4d:64:fd:a2:d9:
29:ba:de:32:aa:38:dd:68:06:a3:88:44:a9:3d:8b:c1:33:34:
f3:9f:74:43:27:59:7b:4b:29:af:bb:e6:40:7d:04:79:7c:30:
fa:18:c3:ac:64:64:37:87:40:54:14:bb:3f:a4:5c:bc:ac:bb:
7d:07:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:19:37 2025 by rpki-client